CVE-2022-3802

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in IBAX go-ibax and classified as critical. This vulnerability affects unknown code of the file /api/v2/open/rowsInfo. The manipulation of the argument where leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212638 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-380207.3Visual Studio Code Elevation of Privilege VulnerabilityCVE-2022-380217.0Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityCVE-2022-380223.3Windows Kernel Elevation of Privilege VulnerabilityCVE-2022-380238.1Netlogon RPC Elevation of Privilege VulnerabilityCVE-2022-380255.5Windows Distributed File System (DFS) Information Disclosure VulnerabilityCVE-2022-380265.5Windows DHCP Client Information Disclosure VulnerabilityCVE-2022-380277.0Windows Storage Elevation of Privilege VulnerabilityCVE-2022-380287.8Windows Print Spooler Elevation of Privilege VulnerabilityCVE-2022-380297.0Windows ALPC Elevation of Privilege VulnerabilityCVE-2022-38036.1A vulnerability was found in eolinker apinto-dashboard and classified as problematic. This issue affects some unknown processing of the fileCVE-2022-380304.3Windows USB Serial Driver Information Disclosure VulnerabilityCVE-2022-380318.8Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability